Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/b80ae7f2-c588-3ca2-a4a1-ebffbde2aa4d.roa
File:                     b80ae7f2-c588-3ca2-a4a1-ebffbde2aa4d.roa (raw, json)
Hash identifier:          P4HcEqGaYfhZl056iMJkon8DHXaWfK2OLqhLoiZ1P+E=
Subject key identifier:   80:A2:B1:2E:29:05:AB:52:1A:4C:C7:0C:81:F1:C9:BE:7A:11:F8:C3
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F4328584CAE57367F4CA037ED47547F80
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/b80ae7f2-c588-3ca2-a4a1-ebffbde2aa4d.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     1273
IP address blocks:        216.31.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:36:7f:4c:a0:37:ed:47:54:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=31ed3502-0af1-486b-b519-fb23755101bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:10:1c:39:a6:34:ae:84:2f:56:73:51:0a:b7:
                    ce:d9:72:ea:c9:ef:5e:c1:4a:e8:7e:49:b3:f9:5d:
                    56:bf:76:9e:60:04:2d:de:7b:28:f3:a1:0a:e8:62:
                    62:d3:11:0d:8e:f2:b9:d6:cb:fb:b2:cc:c0:11:1b:
                    13:34:dd:e8:3e:58:e0:ca:0d:28:7e:cc:71:7e:46:
                    06:89:1c:ae:14:df:20:ab:f2:83:52:25:f2:3a:be:
                    38:e5:50:0e:6b:05:64:27:2f:e9:11:f0:d3:9c:a2:
                    83:1d:41:a0:ad:ce:0b:c2:ee:ba:c0:60:c2:86:bc:
                    b8:bb:ee:d4:c2:b3:a1:af:72:d3:36:1f:35:91:a7:
                    cf:06:3a:c4:55:0d:a8:a3:c9:10:4b:a5:7d:91:7a:
                    b7:84:cf:b5:ad:0f:52:5d:cd:29:25:8f:86:e0:7e:
                    86:ea:71:e5:2c:c3:01:63:3f:a1:e5:42:17:d2:6f:
                    71:1a:1a:6f:bc:e7:73:77:2f:c5:68:b5:51:69:a3:
                    a7:21:a1:22:7f:13:df:b8:df:92:6c:28:02:a0:6f:
                    29:91:5b:fc:d5:bb:7a:af:2a:18:1b:a9:b3:f3:d5:
                    05:41:16:09:30:7c:26:88:32:ff:4f:28:70:0e:98:
                    78:f4:c3:78:8b:18:49:b7:71:1d:59:30:9b:3d:be:
                    9a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A2:B1:2E:29:05:AB:52:1A:4C:C7:0C:81:F1:C9:BE:7A:11:F8:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/b80ae7f2-c588-3ca2-a4a1-ebffbde2aa4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.31.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:99:e5:11:77:ed:73:73:57:87:9c:15:37:71:bd:2f:11:69:
         ec:16:b0:aa:eb:83:8b:49:bb:f3:47:80:e1:cc:24:bf:93:96:
         09:f0:e2:24:6b:0f:bc:7a:27:c3:a8:95:6e:19:a1:bf:91:0e:
         73:ce:9e:88:a8:0a:62:77:72:37:e0:df:a9:13:05:25:94:af:
         1e:f4:31:06:5f:81:5b:8b:5e:e9:b1:f8:41:e9:37:56:fc:47:
         b1:11:c8:f2:e5:86:b7:6a:80:bc:d1:00:ce:7c:a1:ae:24:52:
         61:c3:7c:b1:bb:96:00:60:ce:1a:96:e2:ca:9e:6d:c1:44:13:
         59:f3:bb:e3:3f:52:1c:02:d1:29:ab:a4:f5:18:91:84:51:7c:
         dd:11:14:b1:84:b8:80:12:da:c5:56:6b:7f:73:3f:3f:8f:f6:
         53:80:64:2f:9e:92:e0:7e:85:d1:f3:60:c9:6f:4a:e8:a1:c9:
         65:9c:9b:3f:d0:cb:b0:0e:76:ad:f8:c9:98:af:d0:62:50:31:
         31:32:3e:8f:7f:1e:46:13:73:9b:68:b6:4c:5b:f1:aa:53:2b:
         a7:aa:00:49:ac:ed:5e:5f:ce:8b:11:32:82:1d:6c:ed:e3:dc:
         99:77:08:cc:91:c5:40:77:ab:99:67:6c:4b:11:47:e1:0c:48:
         9f:fd:fc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:52 2026 by rpki-client